This topic describes the API operations provided by Web Application Firewall (WAF).

instance information

Name Description
DescribeInstanceInfo Queries the information of a WAF instance in a specific region.
DescribeInstanceSpecInfo Queries the specification of a WAF instance in a specific region.

Domain configurations

Name Description
DescribeDomain Queries the configurations of a specific domain.
CreateDomain You can call this operation to add a domain to WAF.
ModifyDomain Modifies the configurations of a specific domain.
DeleteDomain Removes a specified domain from a WAF instance.
DescribeDomainNames Obtains a list of domains that have been added to a specific WAF instance.
ModifyLogServiceStatus Enables or disables log collection in the real-time log analysis feature for a specific domain.
ModifyLogRetrievalStatus Enables or disables log retrieval for a specific domain.
DescribeDomainBasicConfigs Queries the protection settings in domain configuration records.
DescribeDomainAdvanceConfigs Queries the details in the configuration records of domains added to WAF.
CreateCertificate Uploads a certificate and a private key for a specific domain.
CreateCertificateByCertificateId You can call this operation to upload a certificate for a specified domain name based on the certificate ID.
DescribeCertMatchStatus Checks whether the certificate of a specified domain matches with the private key.
DescribeCertificates Queries available SSL certificates associated with a specific domain.

Protection configurations

Name Description
ModifyDomainIpv6Status You can call this operation to enable or disable protection for a specified domain against malicious IPv6 traffic.
DescribeProtectionModuleStatus You can call this operation to query the DescribeProtectionModuleStatus status of each protection module, including Web intrusion prevention, data security, advanced protection, Bot management, and access control or throttling.
ModifyProtectionModuleStatus You can call this operation to enable or disable the protection of a specified WAF feature, such as Web intrusion prevention, data security, advanced protection, Bot management, and access control or throttling.
DescribeProtectionModuleMode Queries the protection mode of a specified protection module, including the RegEx protection engine, big data deep learning engine, HTTP flood protection feature, data risk control feature, and positive security model.
ModifyProtectionModuleMode Modifies the protection mode of a specific protection module, including the RegEx protection engine, big data deep learning engine, HTTP flood protection feature, data risk control feature, and positive security model.
DescribeProtectionModuleRules You can call this operation to query the configuration records of DescribeProtectionModuleRules in a specific WAF feature, such as Web intrusion prevention, data security, Bot management, access control or throttling, and website whitelist.
CreateProtectionModuleRule You can call this operation to create rules in a specified WAF feature, such as Web intrusion prevention, data security, Bot management, access control or throttling, and website whitelist.
ModifyProtectionModuleRule You can call this operation to modify the ModifyProtectionModuleRules of a Web intrusion prevention service (WAF) feature, such as Web intrusion prevention, data security, advanced protection, anti-Bot, access control and throttling, and whitelist.
ModifyProtectionRuleStatus Call the ModifyProtectionRuleStatus API to enable or disable the WAF protection features for the specified domain, including website tamper-proofing, legitimate crawler defense, crawler threat intelligence, custom protection policies, and website whitelist. The specified rule in the Ram user SDK.
DescribeDomainRuleGroup Queries the ID of the rule group of the RegEx protection engine configured for a specified domain to implement web application protection.
SetDomainRuleGroup Selects a default rule group or customizes a rule group for a specified domain to implement web application protection.
ModifyProtectionRuleCacheStatus Updates cached pages of a specific domain protected by tamper protection rules.